Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/wtHvUUEBKpecU95cJCBjwBXIyFM.roa
File: wtHvUUEBKpecU95cJCBjwBXIyFM.roa (raw, json)
Hash identifier: mNNvoDTEhZQOBLemoApsWk3Gy3NbhXq1e0BNHY0+0p4=
Subject key identifier: C2:D1:EF:51:41:01:2A:97:9C:53:DE:5C:24:20:63:C0:15:C8:C8:53
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019421B1E903CF1570BC7C857F06C48F0582
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/wtHvUUEBKpecU95cJCBjwBXIyFM.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62261
IP address blocks: 194.85.28.0/23 maxlen: 23
194.85.28.0/24 maxlen: 24
194.85.29.0/24 maxlen: 24
212.192.230.0/23 maxlen: 23
212.192.230.0/24 maxlen: 24
212.192.231.0/24 maxlen: 24
212.192.232.0/23 maxlen: 23
212.192.232.0/24 maxlen: 24
212.192.233.0/24 maxlen: 24
212.192.234.0/23 maxlen: 23
212.192.234.0/24 maxlen: 24
212.192.235.0/24 maxlen: 24
212.192.236.0/23 maxlen: 23
212.192.236.0/24 maxlen: 24
212.192.237.0/24 maxlen: 24
2a09:bd00:10::/44 maxlen: 44
2a09:bd00:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e9:03:cf:15:70:bc:7c:85:7f:06:c4:8f:05:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2d1ef5141012a979c53de5c242063c015c8c853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:cb:ce:cc:d0:96:0b:b0:fe:f9:0b:79:d8:
be:1e:8e:34:b7:4c:0d:36:e8:2f:3c:40:e9:2f:d8:
66:fb:40:b9:92:97:1c:d7:93:74:d3:c2:b8:84:28:
86:71:4a:c4:41:4a:d8:1e:3f:3a:20:28:34:09:5e:
b2:0e:05:c9:c5:25:15:f2:09:2e:cb:bf:96:fd:28:
50:41:33:e1:50:d3:ff:a1:50:6d:b9:6a:03:5c:be:
45:2b:37:43:60:a1:83:ac:0c:c3:c1:ef:ae:39:2b:
6b:30:88:32:84:04:6a:e5:dc:c9:b5:a3:94:38:7f:
43:74:1e:1a:89:6c:12:01:3c:ba:78:e0:66:37:33:
08:ff:24:f4:70:2d:0c:e5:8b:f8:23:8f:4c:cb:0e:
97:b8:e6:b1:99:fc:05:a7:3c:2c:72:ba:fd:ec:f2:
29:98:08:5d:76:10:b1:94:49:5e:5d:48:99:21:dc:
4d:94:75:1c:01:17:6b:e7:21:a7:31:a2:40:3d:97:
bb:79:ec:8d:cc:41:a0:c7:3f:8c:c8:5a:48:b1:81:
3c:1d:59:03:02:c7:39:22:71:5b:80:74:72:cf:12:
8f:a3:35:c6:5e:f5:b2:3d:20:56:f4:ab:b9:e2:7f:
c2:fb:cc:15:fb:ce:c4:54:ec:97:13:0f:ed:70:e8:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D1:EF:51:41:01:2A:97:9C:53:DE:5C:24:20:63:C0:15:C8:C8:53
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/wtHvUUEBKpecU95cJCBjwBXIyFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.28.0/23
212.192.230.0-212.192.237.255
IPv6:
2a09:bd00:10::/44
Signature Algorithm: sha256WithRSAEncryption
10:d1:22:be:3b:c1:65:b4:bb:de:1b:03:06:ea:0b:f6:0d:34:
0f:23:7d:00:bd:d2:09:7d:2f:e6:d4:70:b8:30:26:08:0f:11:
15:3b:00:a6:21:92:8f:5a:84:6c:12:46:bf:b7:38:c8:c6:a2:
d2:42:2c:25:fe:d0:c8:cf:dc:b7:6f:f4:e3:aa:9a:12:7f:03:
ba:5e:08:90:35:3f:bf:3d:36:76:62:63:65:d3:87:3d:32:17:
85:05:a2:48:df:da:8e:f4:ea:5d:f1:6d:f5:13:d0:5d:27:a1:
70:f3:57:c3:fd:1c:12:0c:61:53:26:a0:d5:27:58:de:67:e5:
fc:0b:21:08:cf:be:5e:be:ca:9e:d8:71:fd:a5:b5:b1:e6:60:
31:ce:91:d0:09:53:37:15:8b:c7:e2:1c:01:25:78:a0:46:19:
fd:ab:f9:17:9c:7b:74:92:53:80:e9:09:ab:dc:f4:84:6a:8a:
23:0a:17:81:a6:5f:04:36:33:ee:f7:9d:46:97:54:5d:71:46:
54:e0:f4:5f:b1:32:3f:9e:f6:ba:84:ce:66:f3:27:82:a8:b7:
a7:e0:37:ac:88:29:14:0d:ce:50:70:8f:1b:85:10:c3:57:90:
f8:e6:56:da:d0:e1:96:27:8a:97:4b:cf:06:23:c6:fc:3c:58:
54:e7:81:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:34 2025 by rpki-client